Hi all,
See
https://www.freeipa.org/page/ARM
As mentioned earlier: I applied these settings but it wasn't enough. The
startup_timeout was set at a huge 1200 but somewhere during a restart,
it will complain:
........... server did not start after 60s\npkispawn : ERROR
....... server failed to restart\n')
It's complaining about 60 seconds, not 1200 so I guess there's sme other value to
set, somewhere....
You updated /etc/ipa/default.conf and you need to use
/etc/ipa/installer.conf
rob
Winfried
-----Oorspronkelijk bericht-----
*Van*: Rob Crittenden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org
<mailto:Rob%20Crittenden%20via%20FreeIPA-users%20%3cfreeipa-users@lists.fedorahosted.org%3e>>
*Antwoord-naar*: FreeIPA users list
<freeipa-users(a)lists.fedorahosted.org
<mailto:FreeIPA%20users%20list%20%3cfreeipa-users@lists.fedorahosted.org%3e>>
*Aan*: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org
<mailto:FreeIPA%20users%20list%20%3cfreeipa-users@lists.fedorahosted.org%3e>>
*Cc*: Winfried de Heiden <wdh(a)dds.nl
<mailto:Winfried%20de%20Heiden%20%3cwdh@dds.nl%3e>>, Fraser Tweedale
<ftweedal(a)redhat.com
<mailto:Fraser%20Tweedale%20%3cftweedal@redhat.com%3e>>, Rob Crittenden
<rcritten(a)redhat.com <mailto:Rob%20Crittenden%20%3crcritten@redhat.com%3e>>
*Onderwerp*: [Freeipa-users] Re: Replica install on RPI3
*Datum*: Mon, 5 Nov 2018 11:25:21 -0500
Winfried de Heiden via FreeIPA-users wrote:
Hi all,
Believe me, after modifying "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and
/etc/ipa/default.conf is does run on a Pi as a Master but obviously this
is not enough fiir the Replica.
See
https://www.freeipa.org/page/ARM
I did not add this post to discuss whether it is usefull to run on a P,
I try to find out which install parameter (I guess) to modify in which
file. I had FreeIPA running Master running for months on a Pi. It ran
stable :)
There are multiple reports of it (and related hardware like the banana
pi) running fine. How much of a good idea it is is up for debate ;-)
TBH I'm glad you're creating a replica with a CA so you don't have a
single point-of-failure.
rob
Winfried
Fraser Tweedale via FreeIPA-users schreef op 05-11-2018 0:37:
Dogtag CA is a massive enterprise Java program. Can't do much about
it. Run a CA-less deployment, or run a CA-ful deployment with
RaspberryPi replicas having no CA, and CA replicas running on
machines with more memory and more grunt.
Cheers,
Fraser
On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via
FreeIPA-users wrote:
Hi all,
can't tell it's the only issue. Installing the replica without CA
works well. The error happens during a restart during installation
wich take too much time. Don't know what will go wrong after fixing
this issue....
Winfried
John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]:
Ah, so the install went fine but the CA startup is the only
remaining issue?
John
On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>> wrote:
Hi all,
Yes, the Pi is too slow but funny enough it can work perfectly.
The DogTag CA server just takes a painfull time to start. I had a Pi
running as just a master for months quite well, but start Dogtag took
a very long time, but afterwards it all ran well in a small
environment (@home...)
As mentioned, just for the sake of trying and Pi are so cheap, I'
m trying to setup a Pi Replica but default setup timeout settings
need a modification...
Winfried
John Keates schreef op za 03-11-2018 om 16:26 [+0100]:
My suggestion would be: don’t run it on a Pi, it’s not fast
enough. But you came to that conclusion already, so I guess the next
issue would be: where does it fail?I’m assuming the rpm install works
out but ipa-server-install doesn’t? Or does that work but does the
starting of all the components time out?
If it’s just the installation that’s failing, you can get
around that by running the install in an emulated ARM machine first,
and then copying the filesystem over to the Pi.
John
On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>> wrote:
Hi all,
Just because we can and a Rapsberry Pi 3 is cheap, I'm trying
to install a FreeIPA replica on Fedora 29 ARM. It looks like the
Raspberry is a bit too slow for default installation settings:
018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was
garbage collected before it was cleared.password file contains no
datapkispawn : ERROR ........... server did not start after
60spkispawn : ERROR ....... server failed to restart
2018-11-03T12:27:12Z CRITICAL Failed to configure CA
instance: CalledProcessError(Command ['/usr/sbin/pkispawn', '-s',
'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1:
'WARNING: Password was garbage collected before it was
cleared.\npassword file contains no data\npkispawn : ERROR
........... server did not start after 60s\npkispawn : ERROR
....... server failed to restart\n')2018-11-03T12:27:12Z CRITICAL See
the installation logs and the following files/directories for more
information:2018-11-03T12:27:12Z CRITICAL
/var/log/pki/pki-tomcat2018-11-03T12:27:12Z DEBUG Traceback (most
recent call last): File
"/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py",
line 164, in spawn_instance ipautil.run(args, nolog=nolog_list)
File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line
573, in run p.returncode, arg_string, output_log, error_log
ipapython.ipautil.CalledProcessError: CalledProcessError(Command
['/usr/sbin/pkispawn', '-s', 'CA', '-f',
'/tmp/tmpv2y32e9l'] returned
non-zero exit status 1: 'WARNING: Password was garbage collected before
it was cleared.\npassword file contains no data\npkispawn : ERROR
........... server did not start after 60s\npkispawn : ERROR
....... server failed to restart\n')
I did change the "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and
/etc/ipa/default.conf but it doens't seem to be enough.
Any sugestion?
Winfried
_______________________________________________
FreeIPA-users mailing list --
freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________FreeIPA-users
mailing list -- freeipa-users(a)lists.fedorahosted.orgTo
<mailto:freeipa-users@lists.fedorahosted.orgTo> unsubscribe
send an email to freeipa-users-leave(a)lists.fedorahosted.orgFedora
<mailto:freeipa-users-leave@lists.fedorahosted.orgFedora>
Code of Conduct:
https://getfedora.org/code-of-conduct.htmlList
Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
<mailto:freeipa-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...